Re: Upgrade ?

2002-06-24 Thread RON MCKEEVER
Hi Mr Woolley, Thanks, for the email. That REALLY helped me to get my mod_ssl-2.8.7-1.3.23 upgraded to mod_ssl-2.8.10-1.3.26. aca# pwd opt/apache/bin aca# ./apachectl startssl Apache/1.3.26 mod_ssl/2.8.10 (Pass Phrase Dialog) I was wondering is there a web page at apache/or modssl site that ex

Re: Upgrade ?

2002-06-24 Thread Cliff Woolley
On Mon, 24 Jun 2002, Thomas Binder wrote: > > Then when you run 'make install' from the Apache 1.3.26 source > > directory, it will overwrite your 1.3.23 installation. > > Just in case anyone wonders: it will NOT overwrite the config > files of the 1.3.23 installation. Oh right... meant to point

Re: Upgrade ?

2002-06-24 Thread Thomas Binder
Hi! On Mon, Jun 24, 2002 at 11:32:06AM -0400, Cliff Woolley wrote: > Then when you run 'make install' from the Apache 1.3.26 source > directory, it will overwrite your 1.3.23 installation. Just in case anyone wonders: it will NOT overwrite the config files of the 1.3.23 installation. Ciao Tho

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Peter Viertel
Perhaps if you watch the session with Eric Rescorla's excellent ssldump tool you may get to the bottom of it http://www.rtfm.com/ssldump/ Or another possibility altogether... I had a problem which looked similar to this which was some solaris specific mutex bug which meant that child proc

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Alex Kotov
I've seen strange problems with IE5, too, but these connections have "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; DigExt)" as User-Agent. Unfortunately, changing tcp keepalive setting is not an option for us. I don't know all the intricacies of SSL handshake, but it looks like it starts b

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Andy Osborne
I've seen this happen sometimes on our SSL servers (which do quite a lot of traffic). A quick search of the logs for recent connections from the same address always shows the client as IE5.0 - which is known to be broken. The connections seem to stall in the SSL negotiation and get killed off bu

RE: Reverse proxying of SSL traffic

2002-06-24 Thread Merton Campbell Crockett
On Mon, 24 Jun 2002, Philip Ravenscroft wrote: > > The reverse proxy should now make an SSL connection to > > webserver (this is > > running IBM HTTPServer, IBM's packaged Apache). webserver has it's own > > self-signed certificate. > > Out of the box, mod_proxy cannot negotiate secure connectio

Re: hanging apache processes (1.3.29 + mod_ssl 2.8.9)

2002-06-24 Thread Alex Kotov
Hi Cliff, Thanks for your response. I'm using SSLRandomSeed startup builtin SSLRandomSeed connect builtin and 5 is definitely the file descriptor for the network connection. Is there anything else I should check? Thanks, - Alex On Mon, 24 Jun 2002, Cliff Woolley wrote: > On Sun, 23 Jun 2

RE: Reverse proxying of SSL traffic

2002-06-24 Thread Philip Ravenscroft
> The reverse proxy should now make an SSL connection to > webserver (this is > running IBM HTTPServer, IBM's packaged Apache). webserver has it's own > self-signed certificate. Out of the box, mod_proxy cannot negotiate secure connections, so it can't connect to your backend server using https.

Re: Two copies of Apache running on the same server...

2002-06-24 Thread Peter Viertel
you can run as many instances of apache that your system can support so long as no two instances listen on the same port - at least thats the theory. In practice, apache writes to various files such as the .pid file, lockfiles, mutex lockfiles etc - and it can be difficult to make sure the dif

RE: Reverse proxying of SSL traffic

2002-06-24 Thread michael_pacey
Yep, I did that and port 80 works like a dream. When you say: >Then, set up a virtual server on port 443 with the same proxy stuff. >You reference the certificate file there. this is the bit that bothers me. Here's my virtual host: ServerName slrsdct1.internal.standardlife.com

Re: Upgrade ?

2002-06-24 Thread Cliff Woolley
On Mon, 24 Jun 2002, RON MCKEEVER wrote: > Im a little confused on how to upgrade my current mod_ssl-2.8.7-1.3.23, to > mod_ssl-2.8.10-1.3.26. > When I untar the new apache1.3.26 it is in it own dir.. So how do I upgrade > 1.3.23? When I run the configure statement in the mod_ssl-2.8.10 dir I can

Upgrade ?

2002-06-24 Thread RON MCKEEVER
Hello, Im a little confused on how to upgrade my current mod_ssl-2.8.7-1.3.23, to mod_ssl-2.8.10-1.3.26. When I untar the new apache1.3.26 it is in it own dir.. So how do I upgrade 1.3.23? When I run the configure statement in the mod_ssl-2.8.10 dir I cant state --with-apache="1.3.23", I need t

Two copies of Apache running on the same server...

2002-06-24 Thread Yu, Ming
I have a web environment that support both http and https on the same machine. The machine is a powerful SParc 450 with a lot of memory and CPU power. I am wondering if I can install copies of apache on the same machine, one runs http, and another runs https. Will this improve the server perfor

RE: Reverse proxying of SSL traffic

2002-06-24 Thread Philip Ravenscroft
Set up two virtual servers for the same IP, one on port 80 (with just simple proxy rules). Confirm this works. Then, set up a virtual server on port 443 with the same proxy stuff. You reference the certificate file there. Phil > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[

Re: Apache + Modssl mod_log_config.so bug

2002-06-24 Thread Joe Orton
On Fri, Jun 21, 2002 at 03:00:40PM -0400, Karl Grindley wrote: > > after upgrading to Apache 1.3.26 and ModSSL 2.8.9, the webserver seems > to die after/during log rotation with the following errors. It appears > that when the logs either don't exists, or some other scenario, the > webserver die

undefined symbol X509_free

2002-06-24 Thread Zac Hillier
Hi, Have installed apache-2.0.39 with ssl module on redhat 7.3, when trying to start the server with -D SSL I get an error: Syntax error line 234 of httpd.conf Cannot load mod_ssl.so into server : undefined symbol X509_free When I build apache I used --enable-ssl=shared and --wth-ssl=/usr/local

Reverse proxying of SSL traffic

2002-06-24 Thread michael_pacey
Hi list, I have a requirement to set up a reverse proxy (web accelerator) which will accept incoming HTTP and HTTPS connections (using our Verisign credentials on the proxy) and proxy those requests to other web servers. The catch is I need the connection between the proxy and the web server to

[ANNOUNCE] mod_ssl 2.8.10

2002-06-24 Thread Ralf S. Engelschall
Another bugfixing round in the maintainance of mod_ssl 2.8 for Apache 1.3. Fetch it and upgrade from: o http://www.modssl.org/source/ o ftp://ftp.modssl.org/source/ Yours, Ralf S. Engelschall [EMAIL PROTECTED]

REPOST [apache 2.0.39 w/SSL on HP-UX 11.0 ignores SSLRandomSeed setting]

2002-06-24 Thread V. T. Mueller
- Forwarded message from "V. T. Mueller" <[EMAIL PROTECTED]> - To: [EMAIL PROTECTED] Date: Fri, 21 Jun 2002 14:33:47 +0200 From: "V. T. Mueller" <[EMAIL PROTECTED]> Subject: apache 2.0.39 w/SSL on HP-UX 11.0 ignores SSLRandomSeed setting User-Agent: Mutt/1.3.26i Hello, A recently built

Re: [BugDB] Performance issue (PR#723)

2002-06-24 Thread Thomas Binder
Hi! On Sat, Jun 22, 2002 at 01:49:12AM +0200, [EMAIL PROTECTED] wrote: > This caused a different behavior. I mean, it took a little while > (~3 minutes), to the loadav get high, and after a few minutes, > it got worse... the loadav reached ~60... Without the > "no-threads no-idea -fPIC" options a

C compiler cannot create executables

2002-06-24 Thread Webmaster
Hi everybody.       Hans    I have a problem with mod_ssl 2.8.9 for Apache 1.3.26. When I try to configurethis module for compilation (# configure --with-apache=/var/tmp/apache_1.3.26 ) it gives the following error:Configuring mod_ssl/2.8.9 for Apache/1.3.26 + Apache location: /var/tmp/apach